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1 . (currently amended) Apparatus for detecting whether F**te^link status 
information sent from a first router is unreliable, comprising: 

a memory for storing a router status database; and 

a processor which (i) receives a first signal corresponding to a first router status 
message sent by the first router, the first router status message containing jeo^te^link.status 
information indicative of the status of communication between the first router and a second 
router, (ii) compares the received first signal with a second signal stored in said router status 
database, the second signal corresponding to a second router status message sent by the second 
router containing geutef -link s tatus information indicative of the status of communication 
between the second router and the first router, and (iii) issues an alarm signal that indicates that 
the signal comparison reveals that the first and second router status messages are inconsistent. 

2. (original) Apparatus according to Claim 1, wherein said apparatus is incorporated 
into the second router. 

3. (original) Apparatus according to Claim 1, wherein said processor waits a 
predetermined period of time after receiving the first signal before performing the signal 
comparison. 

4. (original) Apparatus according to Claim 1, wherein the processor performs the 
signal comparison by determining if both the first and second signals indicate that the link 
between the first and second routers is operational. 

5. (original) Apparatus according to Claim I, wherein said processor, after the 
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signal comparison, (i) waits a predetermined period of time, (ii) receives renewed first and 
second signals, and (iii) reperfonns the signal comparison on the basis of the renewed first and 
second signals. 

6. (original) Apparatus according to Claim 1, wherein the processor issues the alarm 
signal in a third router status message transmitted to at least the second router. 

7. (currently amended) Apparatus for detecting false routing updates issued from a 
compromised router, comprising: 

a memory which stores a router database that contains an entry 
corresponding to a router update received from another router and oharaotorigi afr -mdicatmiBL the 
link status between the another router and the compromised router; and 

a processor which (i) receives a signal corresponding to a router update 
received from the compromised router and ehoraotoriginp indicating the link status between the 
compromised router and the another router, (ii) compares the received? signal with the entry 
stored in the router database, and (iii) issues an alarm signal that indicates that the received 
signal and the database entry are inconsistent. 

8. (original) Apparatus according to Claim 7, wherein said processor issues a router 
update if said processor determines that the received signal and the database entry contain 
complementary link status information regarding the link between the compromised router and 
the another router. 

9. (original) Apparatus according to Claim 7, further comprising a receiver for 



PAGE 5/10 * RCVD AT 1015/2005 6:12:13PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-6/29 1 DNIS:2733123 * CSID: " DURATION (mm-ss):02-C0 



10/05/2005 06:14 FAX 12 006/010 

Application^, 09/533467 - 3 - Docket No.: BBNT-P01-318 

receiving the router update from the compromised router, and a transmitter for transmitting the 
alarm signal. 

10. (original) Apparatus according to Claim 7, wherein said apparatus comprises the 
another router. 

1 1 . (currently amended) A method for detecting whether route^]inl£.status 
information sent from a first router is unreliable, comprising the steps of: 

storing a router status database; 

receiving a first signal corresponding to a first router status message sent 
by the first router, the first router status message containing i^tttei-linL&tafus information 
indicative of the status of communication between the first router and a second router, 

comparing the received first signal with a second signal stored in said 
router status database, the second signal corresponding to a second router status message sent by 
the second router, the second router status message containing FettteJrUnk.status information 
indicative of the status of communication between the second router Ht-andtiie first router, and 

issuing an alarm signal that indicates that the signal comparison reveals 
that the first smd second router status messages are inconsistent. 

12. (original) A method according to Claim 11, wherein said method is perfonned in 
the second router. 

13. (original) A method according to Claim 11, further comprising the step of 
waiting a predetermined period of time after receiving the first signal before performing the 
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signal comparison. 

14, (original) A method according to Claim 11, wherein the signal comparison is 
performed by determining if both the first and second signals indicate that the link between the 
first and second routers is operational. 

15, (original) A method according to Claim 1 1, further comprising the steps of, after 
the signal comparison; 

waiting a predetermined period of time; 

receiving renewed first and second signals; and 

reperfonning the signal comparison on the basis of the renewed first and 

second signals. 

16. (original) A method according to Claim 1 1, wherein the step of issuing the alarm 
signal comprises the step of issuing the alarm signal in a third router status message transmitted 
to at least the second router. 

17. (currently amended) A method for detecting false routing updates issued from a 
compromised router, comprising the steps of: 

storing a router database that contains an entry corresponding to a router 
update received from another router and ohaiaotcriging i ndicating & e-a_link status between the 
another router and the compromised router; 

receiving a signal corresponding to a router update received from the 
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compromised router and choraotcririnfr^^ link status between the compromised 

router and the another router; 

comparing the received signal with the entry stored in the router database; 

and 

issuing an alarm signal that indicates that the received signal and the 
database are inconsistent. 

1 8. (previously presented) A method according to Claim 1 7, further comprising the 
step of issuing a router update if said processor determines that the received signal and the 
database entry with respect to the link between the compromised router and the another router. 

1 9. (original) A method according to Claim 17 9 further comprising the step of 
broadcasting the alarm signal. 

20. (original) A method according to Claim 17, wherein said steps are performed in 
the another router. 

2 1 . (currently amended) A storage medium containing computer-readable code 
which causes one or more router processors to perform a method for detecting whether routor 
link s tatus information sent from a first router is unreliable, the computer-readable code causing 
the one or more router processors to perform the functions of: 

storing a router status database; 

receiving a first signal corresponding to a first router status message sent 
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by the first router, the first router status message containing «Htteplink status information 
indicative of the status of communication between the first router and a second router; 

comparing the received first signal with a second signal stored in said 
router status database, the second signal corresponding to a second router status message sent by 
the second router, the second router status message containing feutef-linlLstatus information 
indicative of the status of communication between the second router in the first router; and 

issuing an alarm signal that indicates that the signal comparison reveals 
that the first and second router status messages are inconsistent. 

22. (currently amended) A storage medium containing computer-readable code 
which causes one or more router processors to perform a method for detecting false routing 
updates issued from a compromised router, the computer-readable code causing the one or more 
router processors to perform the functions of: 

storing a router database that contains an entry corresponding to a router 
update received from another router and characterising indicating t he link status between the 
another router and the compromised router; 

receiving a signal corresponding to a router update received from the 
compromised router and oharaotoriging indicating t he link status between the compromised 
router and the another router, 

comparing the received signal with the entry stored in the router database; 

and 

issuing an alarm signal that indicates that the received signal and the 
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database entry are inconsistent. 

23. (currently amended) Apparatus for detecting whether festeFlinkstatus 
information sent from a first router is unreliable, comprising: 

means for storing a router status database; and 

means for (i) receiving a first signal corresponding to a first router status 
message sent by the first router, the first router status message containing i-euteriinkstatus 
information indicative of the status of communication between the first router and a second 
router, (ii) comparing the received first signal with a second signal stored in said router status 
database, the second signal corresponding to a second router status message sent by the second 
router, the second router status message containing reuteg -link status information indicative of 
the status of communication between the second router in the first router, and (iii) issuing an 
alarm signal that indicates that the signal comparison reveals that the first and second router 
status messages are inconsistent. 
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